$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa File: 38e74e1c-b86a-3296-8086-90ae60fb05a9.roa (raw, json) Hash identifier: mSOfqgLFP6oFW0hmB+bTexpD73XahXb7zDg0ZHoeIbE= Subject key identifier: 0A:6F:A6:70:79:62:54:B2:4C:B4:77:98:31:8A:7B:7B:70:33:D4:9E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BBDE33990E26B3D97137CCFC8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa Signing time: Mon 03 Nov 2025 22:53:18 +0000 ROA not before: Mon 03 Nov 2025 22:53:18 +0000 ROA not after: Sun 01 Feb 2026 22:53:18 +0000 asID: 0 IP address blocks: 38.64.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:e3:39:90:e2:6b:3d:97:13:7c:cf:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 3 22:53:18 2025 GMT Not After : Feb 1 22:53:18 2026 GMT Subject: CN=94e25326-d440-4258-a87b-5c9304447017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:41:1a:f3:8f:03:43:6e:bf:95:5b:7d:f9: b1:d1:67:6b:76:ea:62:18:ce:fb:24:1f:ee:61:de: 81:7e:66:63:01:41:4c:be:6b:b9:12:23:4a:8b:72: 2f:c2:2f:1e:7e:ff:01:c8:3a:c4:af:28:a1:de:7e: 4b:9a:ce:29:ce:60:88:f3:50:13:33:9a:6a:7d:dd: 9f:a4:09:94:d7:8e:d3:a0:f5:ac:c3:53:d6:17:cb: 36:05:af:b0:4c:a9:2a:66:a9:66:86:a6:f6:54:74: cb:93:33:5c:5e:98:75:09:3c:e7:32:38:40:49:48: 43:43:ac:ed:e1:a5:69:7e:21:a9:29:6b:54:cb:d2: ad:74:5b:52:b1:61:2f:76:46:49:1e:bc:dd:e2:ab: bd:d4:f5:7e:93:33:e3:91:74:b9:fa:71:13:d4:ed: 60:92:95:83:49:73:a3:8e:e2:bd:c3:9a:91:88:8c: 5d:e3:fd:f5:f0:95:f8:7e:14:24:92:14:78:b1:78: 1c:2e:53:19:77:19:16:da:5d:da:92:d5:dc:ee:94: 5a:2d:b1:f6:51:e1:41:e0:b1:41:bf:bd:da:0b:32: 84:11:95:9e:39:10:71:6b:64:59:b7:97:f6:0d:e1: 34:cd:64:bc:2f:60:da:ea:ac:09:ce:68:97:76:45: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6F:A6:70:79:62:54:B2:4C:B4:77:98:31:8A:7B:7B:70:33:D4:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.64.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:43:ef:7d:19:7e:36:c0:ed:5a:0d:97:f4:c0:2d:95:a0:f3: 9b:e6:fb:cb:13:fa:e3:87:63:6f:46:94:ae:11:af:45:9c:c4: 9c:d2:2b:d8:83:f9:ff:44:73:60:2f:d7:e4:47:be:ed:87:34: 75:9e:65:76:e1:77:8b:8e:0a:29:c1:01:f9:39:c1:d2:ea:76: 80:7d:a5:ca:69:8b:02:80:be:b0:6a:ad:8a:f8:f0:55:e8:c4: d5:20:4a:b4:87:b6:05:e6:02:d9:84:f2:06:f2:95:17:9a:a0: fb:64:a9:78:c7:62:e5:e7:9f:9c:1c:9d:64:d7:33:94:99:25: b7:e4:a0:ab:7b:d4:6a:d0:01:6a:0d:58:c4:5d:1a:b7:1b:3b: 16:72:d9:e1:6d:87:26:f2:28:65:4c:d5:dc:e4:10:9b:a6:f3: 55:8c:84:9a:69:2c:44:bf:fc:3e:21:6f:af:51:8a:2a:ff:88: aa:e5:55:d5:29:bb:d6:0a:2a:e9:4e:0b:6e:3d:63:8b:e5:ee: 28:09:25:1e:88:cb:57:24:de:d5:c4:da:59:24:25:0e:10:20: 6b:29:ae:1c:19:0b:c9:ce:d9:95:98:72:0f:22:eb:53:34:28: a6:d6:8f:b5:93:e7:20:57:59:f8:f3:33:28:9a:86:55:15:6c: 97:6e:d0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu94zmQ4ms9lxN8z8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTEwMzIyNTMxOFoXDTI2MDIwMTIyNTMxOFowLzEtMCsGA1UEAxMk OTRlMjUzMjYtZDQ0MC00MjU4LWE4N2ItNWM5MzA0NDQ3MDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCRBGvOPA0Nuv5Vbffmx0WdrdupiGM77JB/u Yd6BfmZjAUFMvmu5EiNKi3Ivwi8efv8ByDrEryih3n5Lms4pzmCI81ATM5pqfd2f pAmU147ToPWsw1PWF8s2Ba+wTKkqZqlmhqb2VHTLkzNcXph1CTznMjhASUhDQ6zt 4aVpfiGpKWtUy9KtdFtSsWEvdkZJHrzd4qu91PV+kzPjkXS5+nET1O1gkpWDSXOj juK9w5qRiIxd4/318JX4fhQkkhR4sXgcLlMZdxkW2l3aktXc7pRaLbH2UeFB4LFB v73aCzKEEZWeORBxa2RZt5f2DeE0zWS8L2Da6qwJzmiXdkVkVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApvpnB5YlSyTLR3mDGKe3twM9SeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzhlNzRlMWMtYjg2YS0z Mjk2LTgwODYtOTBhZTYwZmIwNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJkCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFD730ZfjbA7VoNl/TALZWg85vm+8sT+uOHY29GlK4Rr0WcxJzSK9iD +f9Ec2Av1+RHvu2HNHWeZXbhd4uOCinBAfk5wdLqdoB9pcppiwKAvrBqrYr48FXo xNUgSrSHtgXmAtmE8gbylReaoPtkqXjHYuXnn5wcnWTXM5SZJbfkoKt71GrQAWoN WMRdGrcbOxZy2eFthybyKGVM1dzkEJum81WMhJppLES//D4hb69Riir/iKrlVdUp u9YKKulOC249Y4vl7igJJR6Iy1ck3tXE2lkkJQ4QIGsprhwZC8nO2ZWYcg8i61M0 KKbWj7WT5yBXWfjzMyiahlUVbJdu0D0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:46 2025 by rpki-client